add role/permission tests